2025 Shai-Hulud supply chain — GitHub tokens exposed
Data compromised
Email addresses, limited customer names; low impact. No evidence of misuse.
Technical writeup
AirHelp Germany GmbH experienced a security incident on November 24-25, 2025, as a result of the global Shai-Hulud supply-chain malware attack. GitHub access tokens belonging to one developer and a CI/CD service account were briefly exposed, causing temporary access to certain repositories.
Root cause
Supply chain attack (Shai-Hulud malware); exposed GitHub tokens